JP2008090600A - Protective operation control system for control device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a protective operation control system for a control device for driving an electric rolling stock, rapidly performing appropriate protective operation without time-series delay due to serialization of failure detection signals by suppressing the number of transfer signal lines of failure detection signals. <P>SOLUTION: Various failure detection signals outputted from failure detection circuits 12a and 12b are serialized by a parallel/serial conversion circuit 14, and inputted to a serial/parallel conversion circuit 22 of a protective operation part 20. At the same time, OR signal of heavy failure and OR signal of light failure are generated from the failure detection signals by OR circuits 15a and 15b, and outputted to protective operation circuits 23a and 23b. The protective operation circuits 23a and 23b immediately perform protective operation, upon receipt of the OR signals, and a control microcomputer 21 of the protective operation part 20 controls the electric rolling stock or the like without any time delay due to serialization. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention detects various failures and abnormalities in a control device such as a control device for an electric vehicle drive device, transmits a plurality of detected failure detection signals to a protection operation unit, and performs protection operation control according to the failure detection signal It is related with the protection operation control system of a control apparatus which performs.

  In a conventional control device for an electric vehicle drive device, as shown in Patent Document 1, a plurality of failure detection signals that detect various failures or abnormalities (hereinafter collectively referred to as failures) are transmitted between monitor devices. At the same time, the serial signal is converted into a serial signal by the parallel-serial transmission means and transmitted as a single serial signal line. In the monitoring device on the receiving side, the original parallel signal is returned to the original parallel signal by the serial-parallel transmission means. Input to a microcomputer. As a result, a plurality of failure detection signals can be transmitted without using as many lead lines as the number of failure signals to be monitored.

JP 2-74102 (FIG. 1)

With the above conventional technology, the number of signals is reduced and it is possible to configure a transmission circuit without restrictions on the number of signals, but unlike the case where all failure detection signals are transmitted individually, the signals are serialized. As a result, a time-sequential order occurs in each signal, and when the serial signal line is disconnected, a failure detection signal cannot be transmitted at all.
The failure detection signal in the control device for the electric vehicle drive device indicates failure information generated in the electric vehicle, and it is necessary to control the electric vehicle quickly and safely based on this. Among the failures that occur, minor failures that automatically recover, or failures that are recovered by external human manipulation, are called minor failures, and severe failures that are directly related to the drive system of an electric vehicle are called major failures. However, if a single failure occurs, the time-series delay due to signal serialization as in the prior art must be avoided, and the electric vehicle must be controlled quickly and safely.

  In view of the above-described points, the present invention protects a control device that can suppress the number of transmission signal lines of a failure detection signal, and can quickly perform appropriate protection operation without a time-series delay due to serialization of the failure detection signal. An object is to provide an operation control system.

  This invention detects a failure of a control device and outputs a failure detection signal, and receives a plurality of failure detection signals from the failure detection unit via a signal line, and responds to these failure detection signals. And a protection operation control system for a control device including a protection operation unit that executes a predetermined protection operation, wherein the failure detection unit detects a failure of the control device and outputs a failure detection signal. A circuit, a logical sum circuit that outputs a logical sum of the plurality of failure detection signals via a first signal line, and a second signal that converts the plurality of failure detection signals into a serial signal. A parallel / serial conversion circuit for transmitting via a line, wherein the protection operation unit includes a plurality of protection operation circuits that perform a protection operation by an OR signal transmitted via the first signal line; Through two signal lines The serial / parallel conversion circuit that converts the plurality of failure detection signals sent to parallel signals, and the operation of the plurality of protection operation circuits are monitored, and the second signal when the first signal line is disconnected Control means for operating the plurality of protection operation circuits based on the parallel signals transmitted via the line.

  According to the present invention, a protection operation control system for a control device with higher reliability can be realized, which can perform a protection operation quickly without a time series delay due to signal serialization while suppressing the number of transmission signal lines. Can be realized.

Embodiment 1 FIG.
FIG. 1 shows a protection operation control system for a control device for an electric vehicle drive device according to Embodiment 1 of the present invention. The failure is to detect various failures in the control device for an electric vehicle drive device and send out a failure detection signal. The detection unit 10 includes a protection operation unit 20 that performs various necessary protection operations based on a failure detection signal transmitted from the failure detection unit 10.

In the failure detection unit 10, 11 is a control microcomputer that defines a set value in failure detection, 12 a and 12 b are a plurality of failure detection circuits that detect a failure occurring in the electric vehicle, and 13 a and 13 b are failure detection circuits 12 a and 12 b. 14 is a signal line for transmitting each failure detection signal detected in the above, 14 is a parallel / serial conversion circuit for converting a plurality of failure detection signals transmitted by the signal lines 13a and 13b from parallel signals to serial signals, and 15a and 15b are A logical sum circuit that takes a logical sum (OR) of failure detection signals, 15a is a logical sum circuit corresponding to a major failure, and 15b is a logical sum circuit corresponding to a minor failure.
16a and 16b are signal lines for transmitting the logical sum signals of the major fault and the minor fault generated by the OR circuits 15a and 15b, and 17 is for transmitting the fault detection signal serially converted by the parallel / serial conversion circuit 14. It is a signal line.
A signal line 18 is connected to the control microcomputer 11 and transmits a start bit of a serial signal.

In the protection operation unit 20, 21 is a control microcomputer that describes software for performing protection operation of the control device for the electric vehicle drive device, and 22 is a serial / serial signal that converts the serial signal transmitted via the signal line 17 into a parallel signal. The output is supplied to the control microcomputer 21 by the parallel conversion circuit.
23a and 23b are protection operation circuits that perform protection operations corresponding to the respective failure detection signals transmitted by the signal lines 16a and 16b, and 24 is a monitor or the like for each failure detection signal converted by the serial / parallel conversion circuit 22. A display circuit 25 for displaying is a storage circuit for recording each failure detection signal converted by the serial / parallel conversion circuit 22 in time series.
The control microcomputer 21 is connected to the control microcomputer 11 of the failure detection unit 10 through the signal line 18 and is connected to the serial / parallel conversion circuit 22, the protection operation circuits 23 a and 23 b, the display circuit 24, and the storage circuit 25. Various controls as will be described later are executed.

In the above-described configuration, when a certain type of failure occurs in the drive device control device while the electric vehicle is running, it is immediately detected by the failure detection circuits 12a and 12b and sent to the signal lines 13a and 13b as failure detection signals, respectively. Is done.
The sent failure detection signal signal is converted from an individual parallel signal into a serial signal in the parallel / serial conversion circuit 14 and transmitted from the failure detection unit 10 to the protection operation unit 20 via the signal line 17.
In the protection operation unit 20, the serial signal transmitted through the signal line 17 is converted into a parallel signal by the serial / parallel conversion circuit 22 and input to the control microcomputer 21 as an individual failure detection signal. Then, a failure detection signal is displayed on the cab or the like on the display circuit 24 according to a command from the control microcomputer 21, and the failure detection signal is recorded in the storage circuit 25 in time series.

The above operation is basically the same as that of the prior art. In the present invention, the following operation is further performed.
That is, the failure detection circuits 12a and 12b immediately detect the failure with respect to the occurred failure, send the failure detection signal to the signal lines 13a and 13b, and transmit the failure detection signal to the parallel / serial conversion circuit 14. , A fault detection signal is output to the OR circuits 15a and 15b in each of the major fault and the minor fault. In the logical sum circuits 15a and 15b, the logical sum of the failure detection signals generated in each of the major fault and the minor fault is taken, and the respective logical sum signals are transmitted to the protection operation unit 20 via the signal lines 16a and 16b. . In the protection operation unit 20, the protection operation circuits 23a and 23b perform necessary protection operations as soon as the respective logical sum signals are received, thereby protecting the electric vehicle drive control device safely and quickly.

The failure detection signal is input to the control microcomputer 21 via the route of the parallel / serial conversion circuit 14, the signal line 17, and the serial / parallel conversion circuit 22. The failure detection signal of this route passes through the conversion circuit. Therefore, it is slightly delayed compared to the failure detection signal transmitted through the routes of the OR circuits 15a and 15b, the signal lines 16a and 16b, and the protection operation circuits 23a and 23b.
For this reason, in the normal state, the protection operation circuits 23a and 23b perform protection operation quickly by the failure detection signal in the route of the OR circuits 15a and 15b in preference to the route of the serial / parallel conversion circuit 22.

  In this case, the control microcomputer 21 of the protection operation unit 20 monitors the operation of the protection operation circuits 23a and 23b by the route of the OR circuits 15a and 15b, and performs the protection operation and serial / parallel conversion by the route of the OR circuits 15a and 15b. By checking the consistency with the failure detection signal transmitted from the route of the circuit 22, the disconnection of the signal lines 16a and 16b for transmitting the logical sum signal is detected, and further, the serial signal to be transmitted is used for disconnection detection. By adding a bit, disconnection of the signal line 17 that transmits the serial signal is detected.

Hereinafter, the operation when the disconnection detection of the signal line as described above is performed will be specifically described.
FIG. 2 is a signal waveform diagram showing an example of a signal transmitted through the signal lines 17 and 18 of FIG.
S1 is a serial signal transmitted through the signal line 17 in FIG. 1, and S2 is a serial signal S1 created by the control microcomputer 11 of the failure detection unit 10 and transmitted to the control microcomputer 21 of the protection operation unit 20 via the signal line 18. The start bit signal, S3 is a clock signal synchronized with each of the control microcomputer 11 and the control microcomputer 21, and S4 is a counter value counted in the control microcomputer 21.
Upon receiving the start bit S2 output from the control microcomputer 11, the control microcomputer 21 resets the counter as shown in S4 and starts counting up, and at the same time, recognizes information starting from the next rising edge of the clock S3 as a serial signal. . A counter value, that is, a bit length of the serial signal is determined in advance between the control microcomputer 11 and the control microcomputer 21. When the counter value reaches a predetermined value n, the control microcomputer 21 receives the serial signal. Is recognized as having ended.
In the parallel / serial conversion circuit 14 of the failure detector 10, the first bit of the serial signal to be output even when there are no various failure detection signals input through the signal lines 13a and 13b, that is, when no failure has occurred. Is set in advance so that the start flag '11' is output and the end bit '10' is output as the last bit. These flags are effective for preventing the failure detection signal from being accurately recognized and controlled when bits are missing or cannot be detected by the protection operation unit 20 on the receiving side.

Next, the protection operation when the signal lines 16a and 16b for the logical sum signal and the signal line 17 for the serial signal are disconnected will be described with reference to the operation explanatory diagrams of FIGS.
3, 4, and 5, F12a, F12b, F14, F15a, F15b, F21, F22, F23a, F24, and F25 are failure detection circuits 12a and 12b, parallel / serial conversion circuit 14, and OR circuits 15a and 15b, respectively. , Functional blocks of the control microcomputer 21, serial / parallel conversion circuit 22, protection operation circuits 23a and 23b, display circuit 24, and storage circuit 25 are shown.

Now, as shown in FIG. 3, if the signal lines 16a and 16b of the logical sum signal are disconnected, the failure detection signal output from the failure detection circuit is sent to the logical sum circuit and the parallel / serial conversion circuit. In this case, since the signal lines 16a and 16b of the logical sum signal are disconnected, the protection operation by the logical sum signal is not performed, but the serialized failure detection signal is converted into parallel and input to the control microcomputer. .
The control microcomputer that monitors the protection operation is disconnected from the signal lines 16a and 16b of the logical sum signal due to the serialized failure detection signal input even though there is no protection operation by the logical sum signal. At the same time, the protection operation by the serialized failure detection signal is immediately executed.
At the same time, the control microcomputer displays the protection operation information by the serialized failure detection signal and the disconnection information of the signal lines 16a and 16b of the logical sum signal on the display circuit and records this state in the storage circuit. Further, the control microcomputer executes the control necessary for the electric vehicle accompanying the disconnection of the signal lines 16a and 16b safely and promptly.

Next, as shown in FIG. 4, when the signal line 17 for the serial signal is disconnected, the failure detection signal output from the failure detection circuit is sent to the logical sum circuit and the parallel / serial conversion circuit. In this case, the protection operation is immediately performed via the signal lines 16a and 16b for the logical sum signal.
On the other hand, the signal line 17 of the serial signal is disconnected, and no protection information is input to the control microcomputer side.
In this case, the control microcomputer that monitors the protection operation circuit does not receive a serialized failure detection signal and has a serial signal due to the disconnection of the signal line 17 in spite of the protection operation by the logical sum signal. The disconnection of the signal line 17 is detected when the start / end bits cannot be confirmed.
Further, the control microcomputer displays the protection operation information by the logical sum signal and the disconnection information of the signal line 17 of the serial signal on the display circuit, and records this state in the storage circuit. Furthermore, the control necessary for the electric vehicle accompanying the disconnection of the signal line 17 is executed safely and quickly.

Further, as shown in FIG. 5, when both the signal lines 16a and 16b for the logical sum signal and the signal line 17 for the serial signal are disconnected, the failure detection signal output from the failure detection circuit is the logical sum circuit. Although it is sent to the parallel / serial conversion circuit, since the signal lines 16a and 16b of the logical sum signal are disconnected, the protection operation by the logical sum signal is not performed. Further, since the signal line 17 of the serial signal is also disconnected, the failure detection information is not transmitted to the control microcomputer, and the serial signal start / last bit due to the serial signal disconnection cannot be confirmed as in the case of FIG. The disconnection of the signal line 17 of the serial signal is detected.
The control microcomputer causes the display circuit to display the disconnection information of the signal lines 16a and 16b of the logical sum signal and the disconnection information of the signal line 17 of the serial signal, and records this state in the storage circuit. Further, the control necessary for the electric vehicle accompanying the disconnection of the signal lines 16a and 16b and the signal line 17 is executed safely and promptly.

As described above, according to the first embodiment of the present invention, it is possible to achieve a flexible device configuration by suppressing the number of signal lines by parallel / serial conversion, and immediately, as in the case of individually transmitting failure detection signals. Thus, the protection operation can be realized from the failure detection, and the protection operation control of the electric vehicle drive control device with higher safety can be realized.
In addition, it is possible not only to reliably transmit the generated failure detection information to the protection operation unit, but also to ensure high redundancy even when various transmission lines are disconnected.

  In the above embodiment, the case where the present invention is applied to the protection operation control system of the control device for the electric vehicle drive device has been described, but the protection operation control system of another control device that should avoid the time delay due to serialization is also described. Even if used, the same effect can be obtained.

It is a schematic block diagram of the protection operation control system of the control apparatus for electric vehicle drive devices which shows Embodiment 1 of this invention. It is a signal waveform diagram which shows the signal of the principal part in FIG. FIG. 6 is an operation explanatory diagram illustrating an example of a signal line disconnection state in the first embodiment. FIG. 12 is an operation explanatory diagram illustrating another example of a signal line disconnection state in the first embodiment. FIG. 11 is an operation explanatory diagram illustrating still another example of the signal line disconnection state in the first embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Failure detection part 11 Control microcomputer 12a, 12b Failure detection circuit 13a, 13b Signal line 14 Parallel / serial conversion circuit 15a, 15b OR circuit 16a, 16b Signal line 17, 18 Signal line 20 Protection operation part 21 Control microcomputer 22 Serial / serial Parallel conversion circuit 23a, 23b Protection operation circuit 24 Display circuit 25 Memory circuit

Claims (4)

A failure detection unit that detects a failure of the control device and outputs a failure detection signal, and receives a plurality of failure detection signals from the failure detection unit via a signal line, and in response to these failure detection signals, predetermined failure detection signals are received. In a protection operation control system of a control device including a protection operation unit that executes a protection operation,
The failure detection unit detects a failure of the control device and outputs a failure detection signal, and a plurality of failure detection circuits,
A logical sum circuit for sending a logical sum signal obtained by logically summing the plurality of failure detection signals via a first signal line;
A parallel / serial conversion circuit that converts the plurality of failure detection signals into serial signals and sends them through a second signal line;
The protection operation unit includes a plurality of protection operation circuits that perform a protection operation using a logical sum signal transmitted through the first signal line;
A serial / parallel conversion circuit for converting a plurality of failure detection signals transmitted via the second signal line into parallel signals;
The operation of the plurality of protection operation circuits is monitored, and the plurality of protection operation circuits are operated based on the parallel signal transmitted through the second signal line when the first signal line is disconnected. A control operation control system for the control device.   2. The protection of a control device according to claim 1, wherein the control means detects disconnection of the first and second signal lines based on an operation state of the plurality of protection operation circuits and presence / absence of the parallel signal. Motion control system.   3. The protection operation control system for a control device according to claim 1, wherein the control means includes a storage circuit that records the parallel signals in time series.   The failure detection unit, as the OR circuit, includes a first OR circuit that outputs a logical sum signal obtained by ORing a failure detection signal corresponding to a serious failure among the plurality of failure detection signals. A second logical sum circuit that outputs a logical sum signal obtained by taking a logical sum of failure detection signals corresponding to the failure, and the logical sum signals of the first and second logical sum circuits are connected via different signal lines. 4. The protection operation control system for a control device according to claim 1, wherein the control operation is transmitted to the corresponding plurality of protection operation circuits. 5.

Images